If you have Vista or newer, there are built in settings you can import from a Vista ADM template. The GP path to those settings are \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.